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Remote Logging Mechanism 

FIELD 

[0001] At least one embodiment pertains to computer systems, and more particularly, 

to remotely logging debug information of computer code executing on a computer system. 

PRIOR ART AND RELATED ART 

[0002] As computer code becomes more complex, code debugging, including driver 

and program code, is becoming harder to accomplish. In remote computing situations 
debugging code becomes even harder as the necessary information is not always sent to the 
remote progranmier to aid in the debugging process. 

[0003] Currently, debug information is sent either to the display of the computer 

executing the code or transmitted to a file using a serial port. Debugging by sending 
information to the screen is accomplished by using a print function in program code. This 
print function runs a debug sub-fimction upon the occurrence of a program error during 
execution of the code. Execution of the code is halted during this debug process. Using a 
print library the debug process can proceed in one of two directions. It can use the print 
library and the console library and generate a file using a serial port driver. A serial port, a 
UART (Universal Asynchronous Receiver-Transmitter) device, is limited to a speed of about 
11 5,200 bits per second. This speed is much slower than the speed of the program being 
debugged and may cause even more errors to occur because of this delay. Once the data is 
written to a local file, execution of the program code is resumed. 

[0004] The print library may also utilize a graphics accelerator (GA) library. The OA 

library controls a display adaptor driver. Debug information is sent to the display using this 
driver. However, usually the display is too small to hold all of the necessary information and 
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the display may be difficult to read. Once the data is written to the display, execution of the 
program code is resumed. 

[0005] Additionally, these print functions use a lot of system time and resources 

which may delay later code from executing. This delay could effectively hide later problems 
in the code, especially if the program runs in a real-time environment. 



BRIEF DESCRIPTION OF THE DRAWINGS 

[0006] Fig. 1 is a schematic diagram illustrating one embodiment of a computer 

system in accordance with an embodiment of the invention. 

[0007] Fig. 2 is a flow diagram illustrating further details of logic and operation 

performed in accordance wdth an embodiment of the present invention. 

[0008] Fig. 3 is a schematic diagram of an embodiment of a debug information node. 

[0009] Fig. 4 is a flow diagram illustrating further details of logic and operation 

performed in accordance with an embodiment of the present invention. 

[0010] Fig. 5 is a diagram illustrating an embodiment of a computer system for 

implementing an embodiment of the present invention. 

DETAILED DESCRIPTION 

[0011] A method and system for a manageability extension mechanism for computer 

system firmware are described below. In the following description, numerous specific details 
are set forth, such as embodiments pertaining to the Extensible Firmware hiterface (EFI) 
fi-amework specification, in order to provide a thorough understanding of the present 
invention. It will be apparent to one skilled in the art, that the present invention may be 
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practiced without these specific details. In other instances, well-known designs and 
implementations are not described in detail in order to facilitate description. 
[0012] Fig. 1 depicts a computer system 100 in accordance with an embodiment of 

the invention. The computer system 100 includes a processor 102, a memory 104, a 
firmware storage 1 10 coupled to a bus 108, and a network adaptor 1 12. Exemplary computer 
systems 100 may include, but are not limited to, a personal computer, a network workstation, 
a portable computer, a handheld or palmtop computer, a personal digital assistant (PDA), a 
wireless communication device, a videogame system, and a digital camera. 
[0013] Firmware storage 1 10 is a non-volatile storage device including, but not 

limited to, a flash memory device, an Erasable Programmable Read Only Memory 
(EPROM), and an Electronically Erasable Programmable Read Only Memory (EEPROM). 
Firmware storage 1 10 at least stores a firmware image which includes instructions and/or 
data executable by computer system 100. In one embodiment, the firmware image includes 
BIOS firmware for a personal computer. In another embodiment, the firmware image 
includes firmware stored in a firmware storage device of an expansion board installed on a 
personal computer. In yet another embodiment, firmware image is firmware stored in a 
firmware storage device of a wireless phone, PDA, or a digital camera. 
[0014] In one embodiment, firmware storage 1 10 includes instructions and/or data in 

accordance with an EFI framework specification. Today's firmware architectures include 
provisions for extending BIOS functionality beyond that provided by the BIOS code stored 
in a platform's BIOS device (e.g., flash memory). More particularly, the Extensible Firmware 
Interface enables firmware, in the form of firmware modules and drivers, to be loaded fi-om a 
variety of different resources, including primary and secondary flash devices, option ROMs 
(Read-Only Memory), various persistent storage devices (e.g., hard disks, CD ROMs 
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(Compact Disk-Read Only Memory), etc.), and even over computer networks. In one 
implementation of the EFI framework, the initialization process includes various execution 
phases of firmware stored on the computer system 100. These execution phases include a 
Pre-EFI Initialization (PEI) phase, a Driver execution Environment (DXE) phase, and an EFI 
1.0 execution phase. These phases enable initialization and set-up of various platform devices 
and services, and enable an operating system to be booted in accordance with an OS launch 
phase that follows the EFI 1.0 execution phase. 

[GDIS] In one embodiment, the firmware storage 1 10 is a flash memory device. Those 

skilled in the art will understand that other types of persistent storage devices for maintaining 
firmware code and/or data may be used and that the embodiments using flash devices 
discussed herein are merely exemplary. 

[0016] Flash memory is a non- volatile memory technology that allows manufacturers 

and (with the appropriate hardware/software) end-users to electrically erase and re-program 
information. Flash memory is typically erased in units of memory called blocks instead of 
being erased at the bit level, wherein all bits in a given block are switched to a predetermined 
polarity (i.e., logic level) when the block is erased. In one embodiment, the block size is 64k. 
In another embodiment, the block size is 32k. In one common type of flash memory, such as 
flash memory devices manufactured by the Intel Corporation, blocks of memory are erased 
electronically by setting all bits in a block to I's. Data can then be written to the block by 
flipping individual bits to O's to form appropriate bit patterns corresponding to the data. In 
other types of flash devices, the erased logic state is all 0*s, and writing data to these devices 
comprises changing individual bits to Ts. It is noted that in conventional flash devices, 
individual bits cannot be flipped from a changed (i.e., set) logic level back to the erased logic 
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level; in order to update data in a block, all of the bits have to be erased first, and then 
rewritten. 

[0017] A storage device 106 is coupled to bus 108, in accordance with one 

embodiment. Exemplary storage devices include, but are not limited to, magnetic drives, 
optical drives, or the like. In an altemative embodiment, storage 106 is not part of computer 
system 100, but accessible by computer system 100. 

[0018] A network adaptor 1 12 is coupled to the bus 108. A network adaptor, or 

network interface card (NIC), makes a coimection between the computer system 100 and a 
network. Wired NICs typically use an Ethemet connection and are available in 10, 100, and 
1000 Base-T configurations. A 100-Base-T card can transfer data at 100 Mbps. Wired 
NICs may use the ISA, PCI, PCMCIA, or PCI Xpress bus. Wireless NICs also allow 
connection to a network using wireless specifications such as the IEEE 802.1 1 family and 
Bluetooth (IEEE 802.15). In one embodiment, the network adaptor 1 12 supports the EFI 
framework. 

[0019] In one embodiment, if there are multiple network adaptors 1 12 the user may 

determine to use any network adaptor. However, the user is required to configure the 
running environment first. For example, a toolkit can be used. An exemplary configuration 
instruction may take the form of netdebugcfg -s "ethO 514 192.168.0.1 514." The parameter 
"-s" means to use remote logging described herein. Parameter "ethO" means choosing the 
network adaptor named ethO as the communication device. The first "514" indicates that the 
local port equals "514." Those skilled in the art will note that port is generally associated 
with UDP. Parameter "192.168.0.1" indicates the IP address of the machine on which 
program is nmning, and the last parameter, "514", indicates the remote port. 
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[0020] Traditionally, a BIOS does not provide networking functionality. In one 

embodiment, a BIOS is reconstructed to provide that functionality. In another embodiment, 
the EFI framework is used in addition to BIOS. One embodiment of the EFI framework has 
a BSD (Berkeley Software Distribution) socket compatible interface incorporated into a port 
of the FreeBSD TCP/IPv4 protocol stack, which in tum utilizes the EFI Simple Network 
Interface (SNI) protocol. The EFI Socket Protocol Interface provides one of the core 
components of the EFI Application Toolkit. The socket interface is network transport 
independent. Although most common implementations interface to a TCP/IPv4 network 
stack, it is just as applicable to a TCP/IPv6, IPX, NetBEUI, or Appletalk network stack. The 
socket interface is also the de facto standard networking interface for applications. From an 
EFI perspective, the most important aspect of the architecture is the Socket Protocol Interface 
specification implemented by the TCP/IPv4 stack. By implementing the EFI Socket Protocol 
Interface, new and/or different network stack implementations can be run on a platform 
without requiring a recompile of the applications that use them. The reference TCP/IPv4 
network stack is a port of the FreeBSD implementation. This includes implementations of 
IPv4, TCP, UDP, ARP, and ICMP. The stack also includes support for the Intemet Group 
Management Protocol (IGMP) and the Resource ReSerVation Protocol (RSVP). The stack is 
implemented as an EFI protocol that is available for concurrent use by an application and one 
or more EFI protocols. Access to the network stack is through the EFI Socket Protocol 
Interface. A complete description of the protocol interface can be found in section 3. As with 
a FreeBSD system, all network stack configuration may be performed at runtime. 
[0021] A flow diagram 200 illustrating further details of logic and operation 

performed in accordance with an embodiment of the present invention is shown in Fig. 2. A 
computer system runs a program or code piece 202 including a debug print function that runs 
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a debug sub-function upon the occurrence of a program error during execution of the code 
piece. For illustrative piuposes, this computer system will be referred to as the "client." 
Normal execution of the code piece 202 on the client is halted after an error and the debug 
function is called. A network print driver (NetPrint) 204, accessible by the executing code 
202, is used to transfer debug information from the code 202. In one embodiment, existing 
program code may be re-compiled to utilize the new debug function. The network print 
driver 204 receives the debug information and execution of the code piece 202 is 
immediately resumed. 

[0022] A network adaptor is accessible by its network adaptor driver 206. The 

network print driver 204 transmits the debug information to the network adaptor driver 206, 
which in turn uses the network adaptor to transmit the data to a remote host for storage or 
logging. For illustrative purposes, the remote host is called a "server." The term "server" 
includes computer systems capable of receiving this data. This transmitting and storage of 
data provides the ability to debug and trace executing code remotely at the server. In an 
embodiment, the running state of an executing program is also accessible remotely through 
the network adaptor of the client. 

[0023] Since all debug information is transmitted via the network adaptor directly, 

instead of other devices commonly used such as a serial port, little of the client's running 
time is spent transmitting the debug information. For example, a lOOM NIC can send 1KB 
packet of data in 70 microseconds, whereas a serial port would transmit that same size packet 
in 70 milliseconds. The resource needed for the transfer operation is the network adaptor. 
Therefore, other libraries traditionally used to debug, such as the print library, are not 
necessary. 
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[0024] In an embodiment, the server has a program designed to monitor network 

traffic. This program, when executed, gathers and logs the debug information transmitted 
from the client. The debug information is then accessible by the server. In one embodiment, 
the server program uses a different color or font to display a message received from the 
client. 

[0025] An embodiment of a debug information node 300 transmitted from a client to 

a server is depicted in Fig. 3. A priority (PRI) 302 component indicates the priority of the 
message. The debug information may also include a time stamp 304 that corresponds to the 
time and/or date of when the error in the execution of the computer code occurred. A host 
(client) ID 306 may also be included in the debug information node 300. The host ID 306 
uniquely identifies the particular client on the network that transmitted the debug information 
to the server. This is especially beneficial in highly networked scenarios such as internet 
cafes, where it could otherwise be hard to determine which client is having a problem vAth 
executing code. 

[0026] One embodiment of the debug information node 300 includes metadata 308. 

Metadata describes the program context information of this debugging information which is 
helpfiil to a developer trying to locate errors in program code. The metadata 308 may 
include, but is not limited to, the module name 314 and sub-module name 316 of the code, a 
user definable priority 3 1 8, the file name 320 of the code, and line number 322 of the code. 
Computer code can be divided into several modules or portions. Additionally, each module 
can be fiirther sub-divided into sub-modules. Module name 314 and sub-module name 316 
indicate the particular module or sub-module that is not executing properly. 
[0027] The debug information node 300 also includes debug information 312. Debug 

information 312 may contain several characters describing the current values of variables or 
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the state of the system. This is useful to a program developer to trace and debug problems 
derived from the code. A developer may define the detail of the contents of the debug 
information according to his/her requirements. The length of the debug information node 300 
is limited. The maximum length of the debug information node 300 is the size of the 
Maximum Transmission Unit (MTU) for the current network interface through which the 
debug information node 300 is transferred. 

[0028] In one embodiment, debug information node 300 includes a separator 310. 

The separator 310 includes a project name 324 and a serial number 326. Items lost in 
transmission for unknown reasons are found by using the serial number 326. When an 
information node 300 is ready to be transmitted, a serial number 326 may be assigned. In one 
embodiment, for the subsequent node, the serial number value is incremented by one. For all 
nodes 300, the serial numbers should be exclusive. Typically, the nodes 300 are also 
sequential. A program developer may determine which item of debug information is lost by 
checking the serial number 326 of each node received. 

[0029] A flow diagram illustrating further details of logic and operation performed in 

accordance with an embodiment of the present invention is shown in Fig. 4. 
In one embodiment of the network print driver 400, a filter and node builder 402 provides the 
ability to filter incoming debug information according to configuration parameters stored in 
the configuration module 404. The filter and node builder 402 may also utilize the 
parameters fi-om the configuration module 404 to construct a node of debug information. In 
an embodiment, the node of debug information is a packet suitable for transmission. In 
another embodiment, the node of debug information must be broken down into packets. 
[0030] The configuration module 404 provides a user interface capable of receiving 

instructions from a user for configuring the filter and node builder 402. Configurable 
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elements include, but are not limited to, module name, sub-module name, user defined 
priority, file name, line number, project name, and serial number. 

[0031] The filter and node builder 402 uses parameters of the configuration module 

404 to help filter incoming debug information. For example, for a given debug information 
input into the filter and node builder 402, the module name, sub-module name, and user 
defined priority of the debug information are compared with the values set for these elements 
in the configuration module 404. If these values match, the debug information is accepted by 
the filter and node builder 402. If these values do not match, the filter and node builder 402 
does not accept the debug information as being valid. 

[0032] In one embodiment, a scheduler 406 transmits a node created by the filter and 

node builder 402 to the network adaptor driver 408. If the node fails to transmit, it is saved 
in a buffer queue 410. Reasons for a node to fail to transmit include, but are not limited to, 
the network adaptor driver or network adaptor not functioning properly, the network adaptor 
missing, too much traffic on the network for the network adaptor to operate, loss of power to 
the server or client, and the network being down. In another embodiment, there is no buffer 
queue 410 and failed node transfers are simply ignored. 

[0033] In one embodiment, the buffer queue 410 is stored in a non- volatile memory. 

Nodes stored in a buffer queue 410 of non-volatile memory can be retained even if power is 
removed from the client. This allows the scheduler 406 to attempt to retransmit a node after 
power is restored to the client without losing debug information gathered while the client was 
operational. In another embodiment, the buffer queue 410 is stored in a volatile memory. 
[0034] Nodes stored in the buffer queue 410 may be retransmitted by the scheduler 

406 at a later time. For example, when the network is not as congested with traffic, the 
scheduler gathers a node stored in the buffer queue 410 and attempts to retransmit the node. 
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[0035] In one embodiment, the program code executing on the client includes 

instructions for creating the debug information node. In this embodiment, the configuration 
module and filter and node builder are included. The program code creates the debug 
information node and sends the node to the scheduler 406. 

[0036] In one embodiment, the communication protocol used to transmit the debug 

information packet fi'om the client to the server is a common network protocol including, but 
not limited to, UDP and TCP of TCP/IP. The protocol used should ensure that the 
information sent firom the client arrives to the server. If the protocol can go through different 
subnet, or the internet, the client and server can be placed far away from each other. 
[0037] In one embodiment, the debug information packets are in the format of 

SYSLOG protocol, which is based on the UDP protocol. The S YSLOG protocol is 
commonly used as the kind of network management format in many occasions. In this 
embodiment, SYSLOG is used as the conraiunication protocol because at the user end, there 
are client tools that can be used to receive and show the detail content of the trace/debug 
information. However, traditional SYSLOG does not provide all of the information that 
may be provided by a debug information node. Traditionally, SYSLOG lies on top of the 
UDP layer, whereas in this embodiment, only the driver of the network adaptor is needed. 
[0038] Fig. 5 illustrates an embodiment of an exemplary computer system 500 for 

practicing an embodiment of the invention described herein. Computer system 500 is 
generally illustrative of various types of computer devices, including personal computers, 
laptop computers, workstations, servers, etc; for simplicity, only the basic components of the 
computer system are discussed herein. Computer system 500 includes a processor chassis 
502 in which various hardware components are housed, including a floppy disk drive 504, a 
hard disk 506, a power supply (not shown), and a motherboard 508 populated with 
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appropriate integrated circuits including system memory 510 coupled to one or more 
processors 512. Memory 510 may include, but is not limited to. Dynamic Random Access 
Memory (DRAM), Static Random Access Memory (SRAM), Synchronized Dynamic 
Random Access Memory (SDRAM), Rambus Dynamic Random Access Memory 
(RDRAM), or the like. Processor 512 may be a conventional microprocessor including, but 
not limited to, an Intel Corporation x86, Pentium, XScale, or Itanium family microprocessor, 
a Motorola family microprocessor, an IBM PowerPC microprocessor, or the like. Hard disk 
506 may comprise a single unit, or multiple units, and may optionally reside outside of 
computer system 500. The system also includes a boot firmware device on which firmware is 
stored, which may typically comprise non- volatile memory such as a ROM device 520 or a 
flash device 522. The motherboard may include other firmware devices as well (not shown). 
In general, the system's processors will comprise 32- or 64-bit architectures, and the system 
memory will include physical addressing schemes appropriate to the processor(s), and may 
be accessed via corresponding address and data buses to which the processor(s) and the 
memory are connected. 

[0039] A monitor 5 14 is included for displaying graphics and text generated by 

firmware, software programs and program modules that are run by computer system 500, 
such as system information presented during system boot. A mouse 516 (or other pointing 
device) may be connected to a serial port, USB port, or other like bus port communicatively 
coupled to CPU(s) 512. A keyboard 518 is communicatively coupled to motherboard 508 in 
a similar manner as mouse 516 for user entry of text and conunands. In one embodiment, 
computer system 500 also includes a network interface card NIC or built-in NIC interface 
(not shown) for connecting computer system 500 to a computer network 530, such as a local 
area network (LAN), wide area network (WAN), or the Internet. 
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[0040] The illustrated embodiment further includes an optional add-in card 524 that 

is coupled to an expansion slot of motherboard 508. In one embodiment, add-in card 524 
includes an Option ROM 526 on which firmware is stored. Computer system 500 may also 
optionally include a compact disk-read only memory ("CD-ROM") drive 528 into which a 
CD-ROM disk may be inserted so that executable files, such as an operating system, and data 
on the disk can be read or transferred into system RAM 510 and/or hard disk 506. Other mass 
memory storage devices may be included in computer system 500. 
[0041] In another embodiment, computer system 500 is a handheld or palmtop 

computer, which are sometimes referred to as personal digital assistants (PDAs), that may be 
used with the present invention. Handheld computers may not include a hard disk or other 
mass storage, and the executable programs are loaded fi^om a corded or wireless network 
connection into memory 510 for execution by processor 512. A typical computer system 500 
will usually include at least a processor 512, memory 510, and a bus (not shown) coupling 
the memory 5 1 0 to the processor 512. 

[0042] It will be appreciated that in one embodiment, computer system 500 is 

controlled by operating system software that includes a file management system, such as a 
disk operating system, which is part of the operating system software. For example, one 
embodiment of the present invention utilizes Microsoft Windows as the operating system for 
computer system 500. In another embodiment, other operating systems such as, for example, 
but not limited to the Apple Macintosh operating system, the Linux operating system, the 
Microsoft Windows CE operating system, the Unix operating system, the 3Com Palm 
operating system, or the like may also be used in accordance with the teachings of the present 
invention. 
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[0043] Thus, embodiments of this invention may be used as or to support a firmware 

and software code executed upon some form of processing core (such as processor 512) or 
otherwise implemented or realized upon or within a machine-readable medium. A machine- 
readable medium includes any mechanism for storing or transmitting information in a form 
readable by a machine (e.g., a computer). For example, a machine-readable medium can 
include, but not limited to, a read only memory (ROM), a random access memory (RAM), a 
magnetic disk storage media, an optical storage media, a flash memory device, or the like. In 
addition, a machine-readable medium can include propagated signals such as electrical, 
optical, acoustical or other form of propagated signals (e.g., carrier waves, infrared signals, 
digital signals, etc.). 

[0044] The above description of illustrated embodiments of the invention, including 

what is described in the Abstract, is not intended to be exhaustive or to limit the invention to 
the precise forms disclosed. While specific embodiments of, and examples for, the invention 
are described herein for illustrative purposes, various equivalent modifications are possible 
within the scope of the invention, as those skilled in the relevant art will recognize. 
[0045] These modifications can be made to the invention in light of the above 

detailed description. The terms used in the following claims should not be construed to limit 
the invention to the specific embodiments disclosed in the specification and the claims. 
Rather, the scope of the invention is to be determined entirely by the following claims, which 
are to be construed in accordance with established doctrines of claim interpretation. 
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